azure-ad-b2b

Azure: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:unable to find valid certification path toRequestedTarget

♀尐吖头ヾ 提交于 2021-02-11 12:29:37
问题 We have an application hosted on intranet and we are trying to configure Azure SSO for the same. The login page is getting redirected to Microsoft login portal and we are receiving the authorization Code. But when we try to post a request back to Microsoft to gain the token, we get this particular error. **sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Why is “Application permissions” disabled in Azure AD's “Request API permissions”?

戏子无情 提交于 2020-03-18 11:23:51
问题 I'm trying to give a console app permission to call an API in Azure AD. When I go to "Add permissions," "application permissions" is grayed out and I can only select "delegated permissions." My understanding is that application permissions is right for the console app because it runs on the back-end and users don't sign into it. From the help text for "application permissions": Your application runs as a background service or daemon without a signed-in user. The help text for "delegated

Why is “Application permissions” disabled in Azure AD's “Request API permissions”?

拟墨画扇 提交于 2020-03-18 11:23:19
问题 I'm trying to give a console app permission to call an API in Azure AD. When I go to "Add permissions," "application permissions" is grayed out and I can only select "delegated permissions." My understanding is that application permissions is right for the console app because it runs on the back-end and users don't sign into it. From the help text for "application permissions": Your application runs as a background service or daemon without a signed-in user. The help text for "delegated

Azure AD B2C password reset link doesn't work

柔情痞子 提交于 2019-12-12 01:27:34
问题 As an aside, I wish that every move I make on Azure B2C did not require a trip to stackoverflow. Thank God it's here. Anyway.... I have intentionally used a very similar title as another post as it has been answered but I do not understand it. I wish to offer a reset policy to my users so have followed walk-through in the post: Enable self-service password I am using Signup/SignIn policy, so I get an error. I go back to this StackOverflow post and I identify why in this post: Password reset

How to work with login_hints using Azure custom policy for B2C and B2B combined users

女生的网名这么多〃 提交于 2019-12-11 04:27:30
问题 I need to redirect to the Azure login page based on the user directory i.e either B2C or B2B directory. I had created the custom policy based on the Azure starter pack. When I execute the custom policy URL with the query parameter login_hint in B2C it does not populate in the username textbox. For B2C Login I had customized the login screen. Now when I redirect to the B2B login screen and add the same parameter then the username is populated in the sign in screen. Now the questions is 1. B2C

AAD groups claim missing in JWT token for some users

独自空忆成欢 提交于 2019-12-06 04:29:23
问题 I'm experiencing some strange behavior on our AAD. After a user signed in successful, we're getting an unauthorized for some users on our API calls. Turns out that a claim in the JWT is missing. Some users are getting the "groups" claim (array of all groupIds he belongs to) and some are getting the "hasgroups" claim (a boolean if the user has groups, no Ids). As our API app is checking this "groups" claim for authorization, the users who don't have this "groups" claim are getting a 403.‬

How to Invite user in Azure AD Programmaticaly using Microsoft.Azure.ActiveDirectory.GraphClient sdk

妖精的绣舞 提交于 2019-12-02 08:09:11
问题 I am trying to invite a user in Azure B2B Active directory. I am not able to find a way to do that using Client SDK. Is there a possible way to do that? Thanks for your help in advance. :) 回答1: Is there a possible way to do that? I can't find a method to invite a user with Microsoft.Azure.ActiveDirectory.GraphClient. But we could do that with Microsoft.Graph. And Azure official document also recommend that you use Microsoft Graph instead of Azure AD Graph API. We strongly recommend that you

How to Invite user in Azure AD Programmaticaly using Microsoft.Azure.ActiveDirectory.GraphClient sdk

ε祈祈猫儿з 提交于 2019-12-02 07:15:47
I am trying to invite a user in Azure B2B Active directory. I am not able to find a way to do that using Client SDK. Is there a possible way to do that? Thanks for your help in advance. :) Is there a possible way to do that? I can't find a method to invite a user with Microsoft.Azure.ActiveDirectory.GraphClient . But we could do that with Microsoft.Graph . And Azure official document also recommend that you use Microsoft Graph instead of Azure AD Graph API . We strongly recommend that you use Microsoft Graph instead of Azure AD Graph API to access Azure Active Directory resources. https://docs